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(54) FIRE WALL SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a fire wall system to prevent 
unauthorized access to a normal server without making the lurker to be 
aware of the failure of the unauthorized access. 

SOLUTION: A host OS 202 operates on hardware 201 of an information 
management server 2. On the host OS 202. an emulator 203 operates 
together with various kinds of applications 204. On the emulator 203. a 
virtual normal server 21 and a virtual decoy server 22 operate as 
independent hardware servers and unique IP addresses are assigned to 
each of them. A normal access to the information management server 2 is 
led to the virtual normal server 21, while an unauthorized access is led to 
the virtual decoy server 22. 
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1 

^©^lEgA^lftltT^iEgAKltvX^AtC*?^ 
&AI»±->X^Ao 

7 1> tx zwisiiEm-*)-- A*sfe«*5 1 o -y— f^mm 
x hD-A-07 k uxizmzmz-z z. t zmmttzm 

1 IcfE^W^IEgAlfc.ltvX^A. 
[ff#Hi3] flfrffS(KSlE^-t»— n&±ZSl!&M&£>0-V 
-AtCte. fflKI;:g&-57 Kl/X#tt^£n;t;i£:£# 
^t-r«»^3Sl*it«2icE«CD^iE^AKJl:~>X5 : - 20 
A. 

[f»#Jl4] b7-?lC*gii££*i;fc*Xh-y-- /\* 

^O^IEgAS-|»ih-rs^iE«AI»lh->X^A(C*^ 
T. 

-nt, 

8JtaiE^-y--A5BcDA^r-y ^iET^-tX»^»$ 
til-STti, B&fSlE^-A*t3cttJ?*3i:0-9— a'cd^ 

ffimm&WWi^&teZZiz. MfE^IE7?-fcX/W&»$ 

*-m. ifria^-y— e> ©jfc^'ffi o fcWKiciE 

«-y— A^ ■=>©/£§ £i!i£U HtflE^IE7^-irX^» 

$n^>i. tfif2*5<tD-y— A-^eojctf^siijii-r^^i: 
m t r 3 ^ mm a i» jt -> x t- a „ 

^O^jESASrKih-r-S^iEeAKih^X^AtC^li 
T, 

Bffia^x v-v-n±.<Dmuz>m.mzwLrtibntcmm. : T- 
?m®.&£zfistr)'T-?nmii, 40 

«HE*iOx-^ffi«*»*fcchrooi*n-;p-r*^a 

mmzi mm*. kgies^- ?M*4ui'- h 

fiff!Hchroot<DHfTl'<fcO. WE*t 0-y— A«*©3|lp 
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3 z. t &&mt-rz>7FmmAVi±->*7-A. 

[0 0 0 1] 

*x h-y— /MzmMw&EMtttiE&XXs* ^^tcfi^- 

->X^A(C^0» ^IE&A#t:::=FIE^A©£:B$c£ 
f5tl5Ctt<.' Cin*^*(C|S5ihT^-5^IE«AK 
ih->X^AlcS-r-5» 
[0 0 0 2] 

['&&<Dm$n jfi¥. *-A^-v©a:sic^«$n-5 

iS^ffa-y— A*^C!)^IEgA*^*31:fcfeV>. d©<fc5 

i/ 3 y&m^mv-'WzmAz&te^ttm&m 

[0 0 0 3] Urt»bfcj&t&, ±Ebfcfi£3f5»gAKih-> 
XfATtt. ^IEgA#tegAK:*Bfcbfcc:££18«lT 
£-5fc«6. {&©ftA;£&X?MggA£M#-/t9> a&*tv 
tt^A*l$*Sf^t3 0 fCAfiOilfBir -> 3 

-y— A*^>£it£&£©««Xft^ttSFX{£»;: 

[0 0 0 4] d©«fc-5fc&«aWHS#ftT*&»lC. * 

£01*- A*£HE@U SttfiiO*- /t-r©BfeK*f|F* 

i-5itx*. «a«a-y— /t's©^iE«A*i»jh'r*4: 
mz. yfm.mx^zTiEmx<o^^m^nfjii^o{z 

U/t^^ii3g$nTVi-g> (Network AssociatesttSS© 
CyberCop Sting : 3fcH) „ 

[0005] i^Lfc^e., **©^$g«a-y— n©jfi 

^(C^t 0-y— A**EfiTSl8fi£T«. 

©«A*ttf*«a-y— /t^ofAi d fcwwc-rs c t 

T. ^FiEgA#^43<!:D-y— A'\*J^€^ : -&T^^tCjg 
^fen. Z.<Dtz.xb. TIEfiA#{c*5tD-y— A**^.«5S 

11 tt psa-y— A^a as nx l s 5 1 ^ -5 
it. 

[0 0 0 6] £<->{::. titO-y— A*tt. -?-©*i!j7&<** 

<D-v—^ii\tm!&izmuz>tzit>\z, ^-©^{c^*n* 
jEm-v-rtz&mznzt. ^tnmzsM^- a'^ 

[0 0 0 7] C©«t-5a:ftflSBHI*«¥ft-r*fcie>C. * 
?£BJ©f£B;!W^i. ««*a-y— /t©|*i»K:iE««*4: 
tJtOitiSrffliLX, 37>Kffl7i'tXMSSJ 
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WffiS (W2 000-299555^) Lfco 
[0 0 0 8] ££>fc, *y K»7-^_tK:jE*ai*— A£*3 

tOt- AtSfflSEU X-T y^v-X^AtCcfcoT^IE 

gA#cD-tr y ~> a t 0 A^RSTT * S^X^A 

(tfcfcg^B) £3M8U ^nSErtttUB (#i2 0 0 

0- 2 9 9 5 5 6^) U/Co 
[0 0 0 9] 

«bfcf^0ii*5StiKK-c*0, S/X^A**«3gl;:ft*<t 
[0 0 10] fie^ftfBB©*^^, *y h^-^JiKiIE 

S8»oL 20 

[ooii] $e>tc, ^#awic#iiLT, ftR&a 

*■!■*«* ofc. 
[0 0 12] *«ffltf>BWtt, ±ELfc«#a*<B«IB 

[0 0 13] 

[iis«*nfeft©#ft] ±f5bfcgM^iifiS:T^ 30 

- A^ COPIES A £ l»lh"T -5 ^IE@ A Iftlh > X *r A £ & 
[0 0 14] (D*xMt"-A±{CiRaWlCStt6n& 

it- a^oie^t ^ -fex &WimfcmiEmv— a^k# 

^:t«a^o 40 
[0015] (2)ji3fe*7HuxT«a*n*jEa"y— 

A:fc«fctf33iOlt— A£. mffEIE8£lt— A^coA^r-/ h 
45<tZ/*iOii— A©5R*A.|iaiL, ^FIET^irX^ 

a$n^<h> *to*"--A«>*'vKjii-r-5«tt«i«¥S 
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[0016] (3)^x bv-rt±<Dmt3LZ>mmzmrt$ 

ftit, «rE#£ 0 5 s - mJfiSiES^-^M^ 

L, S&Echroot<&£Sfrl;:<fcO* 0U--A««(O 

[0 0 17] ±EUfc«r«(l)«cJ:n«. iBfrtf-Ai 
3$h Oif-At^SWfc«m—coit--/tJi{C«^$n 

oT, ^^0^-A«iE^it-A^nfcf---r^^tTffi 

[0 0 18] fHfttr^ \s9 HJflHtoWfl— ft© 

T^-feX^IE^it— A*5J;Ifcl3£D It- A*0Uf 

-tte&o LTcrf^T. ^jE«A#Ki^IE«A©0clfc& 
«&nr. [WI-c7)^FIE«A#iCJ:^Eft^>FIE#Aff 

[0 0 19] ±Ebfc«pa(2)JCcfcn^ JE&Vr—rttl 

#«C<k£7^irX£43<hD1t-A^#LT*>, 
&+h- A(D^S^tca^^Tl§^n§Cli:^ftl^ 
[0 0 2 0] JtEbfc«p«(3)JcJ:ntf, iE^-^m 

7 ^irX £43 <hD It- A^^U ag^tO 
r-?I«*6KS^tt)» £©*«K:£*n*7*-fe 

[0 0 2 1] 

v& L&^iESAWih vx^A©^ i mmmmo^a y 

[0 0 2 2] jim^^y £ 1 JC»4, *5SWO^jES 

Ai»ih'>x^A^igffl$n^i»$g«ait- a* (*:xhit 

-A) 2t, ^K«*«a-y— A2JC»bTil«*!y h 
•7-^ lS^UT»tt$nfc**©aim«*3 (3 a, 

3 b-) t^ai^ntv^o Krffiwatfa*- /t2 

SU-A2 1 «rEfiffliEait-A«2 i«c*#-r ^>^F 
IE 7 Z -fe X $r #ft^b 0 £ ft o T § H An^ ffiS*5 1 0 it 
-A2 2<h, AX l 7-KCDfflaAlil»^S2PffiSa^fc 
7^-trX^, hX^ J f>^^fi 1 b^7^iiX^^^ 
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5 

IEgA#K:«fc*7iHi;*£fiJ5£U *OS*fflWI*» 
2 3^a»-r^>^iEffiA^ft]gP2 4 iUEHWMFStf 
-A2^©iBflT^-feXS«rE<K*jE«-y---A2.l's» 

■T*ffl».«»»2-3 tSr^tr. 

[0023] B2a, ^ia«^a-tf-/\ + 2o«i§^« 

[0 0 2 4] »*fI*-/t2 0A-H , JX7 2 0 1 _h 
TB*XhOS 2 0 2^t-S. :^XhOS20 10 
2±T?tt, WE«»«lft»2 3feJ:rPFiESA«»l*2 
4 6^a*i©7^Jir— >a >2 0 4i*i:, ^ItElt 
SfI*-/t2±i:KawaA- F«5x7S«$i»t 
SX^olU— 2 0 3#i^T<5o fit, **J5E®ffi 
Ttt* WEflSBjE**— 2 1 *5<fcCJC(£S* £ 0 it— A* 
2 2^ WEX5:rU— *2 0 3±TttftbfcA— F£ 
XT (A-Fr-fX? : HD) JC<fc SU— At LTfM£ 
TSo 

[0 0 2 5] *^Jfi®«Ttt, mJiax^^l/-^2 0 3 
tbt, *i(OVMware 2 ttfCJ: 0 BB5£$tlfcx 20 
^:xb™3? TVMwarej (http://www.vmware.co 
m) OTLTt^o 

[0 0 2 6] J:EL&*»S«c<kn«. MEffiSlSfiU— 
A2 l&£Zf1gM&2it)'*t—rt2 2\t. m— ©A— FT> 
x7±l:i*SMi:t)^t)6f, ftStaftS I P 

0U-A2 2H fl^EiKffllESit— A2 lOrt^^ntf 

2 i fc*RWl:H-icc*s. 30 

[0 0 2 7] **jSfi»»©i!lff*, 04, 5fc 

T*teimfi]JB#© I P7F r 0 1 J , ^Tl^ti 

ic, Mffllf-A2^ ro2j , {E«iEa-y— 

r0 3j , (KSUfctOI*— /W T0 4J . ^xEffJffl*^ 

T0 5J T*Sfc©£LTKgrr*. 

[0 0 2 8] JEmmmmiZ&ZT 9±.7><Di&&*' 14C 
^Lfect^fC, IE«*Jffl#SB*3 art>&tt, ISfiT&T F 
UX#<jESWffl#© IPK1/X r 0 1 J . $z9cT F l/X 
*«atl'9--A2 0IP7Fl/7 T0 2J TffcSA*- 40 

^ h«is©=iv>F^jamisn*. tt^wait- a 2 © 

2 3 li, HC7^Sffi«-fe~>3 > 

r 0 2 j £<£fiUmi*— A* 2 101 P7F1/X T03J 

[0 0 2 9] SHEl-lt-A^lH MSRASr^hSg 
«LTBr5e<0«iaS:*fT-r*t. fgftTtTFU'X^&H' 
(OIPKI/7 T0 3J . S!5tTFUX^iE«?fJffl#** 

3 a CO I P FUA r 0 1 J t^^/^y Fflti&©JS«£ 
MiHTS, gB9J8l»2 3H ff|A^7h©M7t:7 50 
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FUX T0 3J S#»flD'-A2©IP7Fl/X TO 
2 J K#£ifc*_Tigiil"r£. 

[0 0 3 0] cnfC*fbT, ^IE*Uffl#tC£ST^-fcX 
0 5JC*Lfc<fc?IC, ^jE*Jffl#SB*3 b36^6 
tt, K«7cTFUX*^FjE*Jffl#©I PFUX To 
5 J , «ft7 F 2 © I P F 1/X 

ro2j T**/xiry F^gusns, «««au— 

Fl/X ro 2 J 01*- A 2 20IP7FI/X 

ro4j l£g#&x.Tj£i2£TSo 

[0 0 3 1] «a*tO*-A2 2lt SK/^7h^ 

t^IPFVX T0 4J . «lfe7FUX*^FIfiJffl#JH 
*3 b© I P Hl/X TO 5J T*$>SA^>.y h^MiHf 
So «&&3Jf£g& 2 3 te, §i/^7h0^«7c7Fl/7 
T0 5j $r«fgeait- A 2 O I P7 Fl/X T0 2j IC. 

[0032] ^<d±?\z. ^mmMmiz^nte. ^mm 

7Fl/X^figfetD-y--/X2 2 COT' FUX^##8iPt 
&n50T, 4K«IE8i1*--A2 l^cogA^rl»iJb-C^ 

So 

[0 0 3 3] £fc* ^FJE«A#tti£«45tO-y— A2 2 
tC>gAbTV*Sl:fc^:b£-?\ ^SlESlt — A 2 1-n. 

ogA^ajLfc^otaa^b, tt&m&.mm\z.t>ft 

[0 0 3 4] fcM&tW- A2 2fcM£SlEJg 

*-A2 1 On If— lc«fcO«^T£££a*T€rS©T* 

-^e!>*^a«)T«a^3fts. ^fc, s-it-A©-^ u 

T^irA£^8*5<>:DlJ--A2 2^R»U 

£91*— A 2 2*^^iEeA#«C»UTJ*:S*®^UT 

^©js^^nsy^-fexsfc©^ hvmm 

[0 0 3 5] 06H *»W^iBffl^ns^iE«AKlh 

So 

[0 0 3 6] ilfS^>y h7-# 1 t^tt, IE«it-A6 1 
45«fctf*£0tJ--A6 2#* «tt«iai»6 3*^bT» 
ttSftTt?**. ^jE«A*»»6 4tt, ^IEgA£mfE 

SB63tt, «*#JI/-*T»0* ^FIEffi A^WSP 6 4 Id 
«k*^jESA©tft»H6*JcS^ViT, #il««*3^6 

05R^, *fctt43iD1f--A6 2(D^aS?MfcK#T 
S. 
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[0037] *trve,- *m:ffiBm<DWife*. mi\z^\s 

/tilts ^r>7L*#WUTRWr*. 
[0 0 3 8] jEffi*Jffl#Oit«** 3 a^^jEfflif— A* 
6 1 {w^5TT2lttJ$ tlfc/t^ry h (37>H) . 

0(a)] tt, Sft«J&ffi6 3K45VVC, IE«U— A6 1 
feckOffetO*— 2©55tS- [RB(b), (c)] ^HRr 

iiarr* twa(d), (c)i o 

[0 0 3 9] |7l:^l^|T11 «»«»fe«6 3ttIE 

»0— ;*6 i*^5fe^JS«*S« [WH(d)].-r*««, 

[HB (e)] an, yt*60JK*/^^r^ 

>S*3tC^TTjg^ [HH<0] T5. 
[0 0 4 0] JEtT^EM^ KmW&ffl 6 3 3 20 

afrZiEMV- A6 I JC^TTSim a n^/l^r^y h£:IE 

M-T^o fbl, #UWt6 1, 6 2^?>CD^^ai'5 
JE«*—A*6 l^&OJS«r^&ifi««*3fC3ST 

[0 0 4 1] ^JEgA1£»^6 4lCJ:D^IE^ 

A#»»Sn-5t, cn^gB9M6 3^1» [RB 

(g)] an^>o ^FiE«A*tta5 6 *iEeAa**ft» 
snftiswn iims* 3 a^sisa-o— /t6 i ic^ar 

Tgffi$n/:/^7h [RB00] £*5<h 91*— A6 2 30 
CO^^jH [RB(D ] U 01*"— A*6 2j^£jgj£ 
StlfcJS* [RBKi) 1 £MfsS* 3 I^TTM [R 
H00 ] T£o 

[0042] *safi»»cj:na, mm<$^3fr*>iEm. 
if- a* 6 i tcaSTTiiim a nfc/t^r^ h»a, issu— a 

[0 0 4 3] &fz. ftit-;t6 1, 6 2^^MjHan^> 

jcaifiSB*3^*«F3i«igfi*n*. ^fje^ 

2KlftALT^£K:fc;av&vbe>-3\ iE«iJ— A*6 1^£> 
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IESi1t-A6 1^0>«Akl5fe«Lfc^i:S«6n&^O 
T% CO^iEftA^^ctSHK^ftAfrA^ffiOttSff 

[0 0 4 4] B8I1 *«M*iBfflb*:^iE«ARjt>' 
Xf ACD^ 3 *«B«©»fitS«bfc7P 2 B^& 

[0 0 4 5] WWBfS*--/* 8 fct. IBS-*- /t£LT« 

1, 8 2H b»7-^ i 4^LTHI«*3 t 

[0 0 4 6] i9H «fia«««a*-/^ 8 <£>«/££^ 

[0 0 4 7] -T>^-:7x-X (I/F) 8 4lt 1§K 

>^^Mm^r*jp-r^o 5piE«AEaa5 8 5 sk* 

[0 0 4 8] M7yU^—>3 >§P8 3*4. 

[0 0 4 9] *^T% *^JE^<2«lf££:> Bl OIZtk 

[0 0 5 0] IEMfiJffl#cD®m«*3 a^£, 
^jESA^tft»ans^T^jEfi]ffl#^ilM«8*3 b 
ffiffg^ait-A8tC*fbTS^* [MB(a>] 

3 >SB8 3te. C©»»tB*fc**UT«S*iB« [RB 
(b)] t5, ^cof^ 0fr^<z>SgE«La*^ffanTW 

[0 0 5 1] -ec^f^. a«**3*>6jE«T r — ^fil«8 
liC^TT/iy>yh (=3V>K) /O^m [WH(c)l a 

ina^-^m«8 luteal [whm)] $n^>o iBa? 

Hff -t<OJS«F*iS« [HB(e) ] f*. 
>^-7x-X8 4^SSbTil«^*3^M3l [RBI 

(0] $n^>o 

[0 0 5 2] lufS^IE#A^tta5 8 5lC^f9^F 

JE^iA^fll^n, ^WH>^-7x-X8 4^1tt 

tl^B(g)] $n^>i:, -f >^~^x-A 8 4 teitflT 
yU^r- ->3 >§P8 3ld**LT*$7K3R [pJB(h>] €: 
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tna(i) ] rst, ^tof-^«E 
[0 0 5 3] ai i mmmsmmv-n s cd^^ u 

Jl—h^J U2 hWTIZ Thomej , Tbinj , Tde 

vj , Tvarj r e tcj Oftr^^hU^ft 

U r^^hU Hiomej (OTK. £>tVT-?M$L<D 

ftiffi/T^ h U"C*S Tdecoyj ««$tlT^ 

^> 0 f>f Tdecoyj (DTlCte. Thomej , H)i 

nj . Tvarj ©ftyV U# h U Lfc^o 10 

T, ^^Or-^®«8 2 0f^l/^hU Mmpj te, 

hoine/decoy/var/log/wtnip(h^ftT s €''5o 

[0 0 5 4] ^nCSLT, lEgl^— *Sttt8 1 tt, ^ 
- hxW l/^ h »J <dT<Dtj 1/^7 h U Tvarj <DT\Z.m 
^2*lTV^<OT, f^U^h'J l"wtmpj te* var 
/log/wtmp^^T^^)o -T&*r£, 05fB43^O-x- 
*««8 2li «fiaiE«^— ^««8 1 (O)V— h'rj V 

m-CDTJ hUii!6> r^WhU Tdecoyj « 

[0 0 5 5] mffH^V>F Tchrootj 

&m&8 2 0)m±i<Ly r ^ l/^h 'J Tdecoyj ifi)l,— 

£n^o UJbT, *5<hDf-^8 2 enttriBrV 
1/^7 hU fwtinpj ft, mffErJV>F r c h r o o t j #* 

var/log/wtmp££S£n-5 H £{;ife£>o 

[0 0 5 6] 010 HufEnv> H Ichrootj <D 

3-;i«tt. ^>^-7x-X8 4«g7yj^-y 30 

3 >«8 3ic»bT*tts**ai« craaa) ] -r^o 
^mm tmmn ] -r*. 

[0 0 5 7] feiDf-*««8 2H S«3V>"HS 
HffLTJEB«f*iS3l [raaCm) ] t^^> fetOx-* 

[0 0 5 8] CCOJ:^^, *^Jfi»ffi«c«fcn«. jES^ 
-^m®8 lfe«ttfT r -^««8 2(Dt^ HJ»ig 

-t^^OT, :*IEgA#©7*1zA£43£0 5*-*8l 
*8 2aR»U aSE43t0-r-^«*8 2A^6^iEe 
A#(C;ttLTJ^LTt>, ^CDC^^^n^T^il^ 50 
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9t (^^0f-^«8 2) <£>?>rl^ HJflMRlcStJ 
^T. ^jEfiA^fi^^ffien^^^^Vio 
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